Thread-Modular Model Checking
We present thread-modular model checking, a novel technique for verifying correctness properties of loosely-coupled multithreaded software systems. Thread-modular model checking verifies each thread separately using an automatically inferred environment assumption that abstracts the possible steps of other threads. Separate verification of each thread yields significant space and time savings. Suppose there are n threads, each with a local store of size L, where the threads communicate via a shared global store of size G. If each thread is finite-state (without a stack), the naive model checking algorithm requires O(G. L n ) space, whereas thread-modular model checking requires only O(n.G.(G + L)) space. If each thread has a stack, the general model checking problem is undecidable, but thread-modular model checking terminates in polynomial time.
Unable to display preview. Download preview PDF.
- A. Bouajjani, J. Esparza, and T. Touili. A generic approach to the static analysis of concurrent programs with procedures. In POPL 03: Principles of Programming Languages, pages 62–73. ACM Press, 2003.Google Scholar
- J. M. Cobleigh, D. Giannakopoulou, and C. S. Păsăreanu. Learning assumptions for compositional verification. In TACAS 03: Tools and Algorithms for the Construction and Analysis of Systems, 2003. To appear.Google Scholar
- C. Flanagan, S. N. Freund, and S. Qadeer. Thread-modular verification for shared-memory programs. In ESOP 02: European Symposium on Programming, Lecture Notes in Computer Science 2305, pages 262–277. Springer-Verlag, 2002.Google Scholar
- D. Giannakopoulou, C. S. Păsăreanu, and H. Barringer. Assumption generation for software component verification. In ASE 02: Automated Software Engineering, pages 3–12. IEEE Computer Society, 2002.Google Scholar
- J. E. Hopcroft and J. D. Ullman. Introduction to Automata Theory, Languages, and Computation. Addison-Wesley Publishing Company, 1979.Google Scholar
- C. N. Ip and D. L. Dill. Better verification through symmetry. Formal Methods in System Design, 9(1–2):41–75, 1996.Google Scholar
- J. Queille and J. Sifakis. Specification and verification of concurrent systems in CESAR. In Fifth International Symposium on Programming, Lecture Notes in Computer Science 137, pages 337–351. Springer-Verlag, 1981.Google Scholar